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-Abstract- 

We present a coinductive framework for defining infinitary analogues of equational reasoning and 
rewriting in a uniform way. We define the relation =, a notion of infinitary equational reasoning, 
and the standard notion of inhnitary rewriting as follows: 

^ := „R. (=7j u R)* 

:= fiR.i^S.i^nUR)* oS 

where p and v are the least and greatest fixed-point operators, respectively, and where 

■R := { (/(«!> • ■ • f{tl, ■ ■ . ,t„)) \ f e'£, Si Rtl,. . . ,Sn Rtn} U Id . 

The setup captures rewrite sequences of arbitrary ordinal length, but it has neither the 
need for ordinals nor for metric convergence. This makes the framework especially suitable for 
formalizations in theorem provers. 
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[T] Introduction 

We present a coinductive framework for defining infinitary equational reasoning and infinit¬ 
ary rewriting in a uniform way. The framework is free of ordinals, metric convergence and 
partial orders which have been essential in earlier definitions of the concept of infinitary 
rewriting [niiMiiiiiisiiMiEiiiisiin]- 

Infinitary rewriting is a generalization of the ordinary finitary rewriting to infinite terms 
and infinite reductions (including reductions of ordinal length greater than w). For the 
definition of rewrite sequences of ordinal length, there is a design choice concerning the 
exclusion of jumps at limit ordinals, as illustrated in the ill-formed rewrite sequence 

a->a~>a—>••• b—>b 

LJ-many steps 


* This current paper is an extended version of m- We have included a detailed comparison of our notion 
of infinitary equational reasoning = with the notion Se(— t) from |24| . see Section 
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where the rewrite system is7^ = {a—>a, b—>b}. The rewrite sequence remains for w steps 
at a and in the limit step ‘jumps’ to b. To ensure connectedness at limit ordinals, the usual 
choices are: 


(i) weak convergence (also called ‘Cauchy convergence’), where it suffices that the sequence 
of terms converges towards the limit term, and 

(ii) strong convergence, which additionally requires that the ‘rewriting activity’, i.e., the 
depth of the rewrite steps, tends to infinity when approaching the limit. 


The notion of strong convergence incorporates the flavor of ‘progress’, or ‘productivity’, in 
the sense that there is only a finite number of rewrite steps at every depth. Moreover, it 
leads to a more satisfactory metatheory where redex occurrences can be traced over limit 
steps. 

While infinitary rewriting has been studied extensively, notions of infinitary equational 
reasoning have not received much attention. One of the few works in this area is |24j by 
Kahrs, see Related Work below. The reason is that the usual definition of infinitary rewriting 
is based on ordinals to index the rewrite steps, and hence the rewrite direction is incorporated 
from the start. This is different for the framework we propose here, which enables us to 
define several natural notions: infinitary equational reasoning, bi-infinite rewriting, and the 
standard concept of infinitary rewriting. All of these have strong convergence ‘built-in’. 

We define infinitary equational reasoning with respect to a system of equations TZ, as a 
relation = on potentially infinite terms by the following mutually coinductive rules: 


s {—n U w)* t 


s = t 


oo J- 

^1 — ^1 ' ' ' 

/(si, S 2 , . . . , S„) VT /(ti, t2, ■ ■ • , tn) 


( 1 ) 


The relation v-r stands for infinitary equational reasoning below the root. The coinductive 
nature of the rules means that the proof trees need not be well-founded. Reading the rules 
bottom-up, the first rule allows for an arbitrary, but finite, number of rewrite steps at any 
finite depth (of the term tree). The second rule enforces that we eventually proceed with 
the arguments, and hence the activity tends to infinity. 

► Example 1.1. Let TZ consist of the equation C(a) = a. 

We write to denote the infinite term C(C(C(. ..))), the 
solution of the equation X = C(X). Using the rules Q, 
we can derive C‘^ = a as shown in Figure This is an 
infinite proof tree as indicated by the loop ■■■■■> in which 
the sequence ^ C(a) = 7 ^ a is written by juxtaposing 
^ C(a) and C(a) =n a. 

Using the greatest fixed-point constructor v, we can define = equivalently as follows: 

= := vR.{=n^Rr, (2) 

where R, corresponding to the second rule in is defined by 

:= { (/(si) • ■ • , Sn), /(U, ■ • ■, tn)) I / G E, Si R ti, ..., s„ R } U Id . (3) 

This is a new and interesting notion of infinitary (strongly convergent) equational reasoning. 

Now let 7?. be a term rewriting system (TRS). If we use instead of =n in the rules Q , 
we obtain what we call bi-infinite rewriting ^: 

S (—> 7 ?, U —r) t Si —> • • • Sn —^ tn 

S “ t /(S1,S2, . . . ,S„) ^ f{ti,t2,. . . ,t„) 



M Figure 1 Derivation of C‘^ = a. 


( 4 ) 
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corresponding to the following fixed-point definition: 

“ := vR.{-^n^R)* ■ (5) 

We write ^ to distinguish bi-infinite rewriting from the standard notion —of (strongly 
convergent) infinitary rewriting [32] . The symbol oo is centered above —> in ^ to indicate 
that bi-infinite rewriting is ‘balanced’, in the sense that it allows rewrite sequences to be 
extended infinitely forwards, but also infinitely backwards. Here backwards does not refer 
to reversing the arrow •<—£. For example, for 7^={C(a)—j-alwe have the backward-infinite 
rewrite sequence •••—>■ C(C(a)) —?> C(a) —> a and hence C'^ ^ a. The proof tree for ^ a 
has the same shape as the proof tree displayed in Figure the only difference is that = is 

replaced by ^ and ^ by -2^. In contrast, the standard notion —of infinitary rewriting 

only takes into account forward limits and we do not have a. 

We have the following strict inclusions: 

("50 y — /•— 

_^oo c —>• C = . 

In our framework, these inclusions follow directly from the fact that the proof trees for 
(see below) are a restriction of the proof trees for ^ which in turn are a restriction of the 
proof trees for =. It is also easy to see that each inclusion is strict. For the first, see above. 
For the second, just note that ^ is not symmetric. 

Finally, by a further restriction of the proof trees, we obtain the standard concept of 
(strongly convergent) infinitary rewriting —>'°°. Using least and greatest fixed-point operat¬ 
ors, we define: 

:= oS, (6) 

where o denotes relational composition. Here R is defined inductively, and S is defined 
coinductively. Thus only the last step in the sequence (—>■ U R)* o S' is coinductive. This 
corresponds to the following fact about reductions a of ordinal length: every strict prefix of 
a must be shorter than a itself, while strict suffixes may have the same length as cr. 

If we replace ^ by in we get a definition equivalent to ^ defined by (§. To see 
that it is at least as strong, note that Id C S. 

Conversely, can be obtained by a restriction of the proof trees obtained by the 
rules for -2^. Assume that in a proof tree using the rules Q, we mark those occurrences 
of ^ that are followed by another step in the premise of the rule (i.e., those that are not 
the last step in the premise). Thus we split ^ into and . Then the restriction to 
obtain the relation is to forbid infinite nesting of marked symbols This marking 

is made precise in the following rules: 

S (^ U 4°°)* O t ■■■ _ 

S t /(si,S 2 ,...,S„) f{tl,t 2 ,...,tn) s S 

Here —r°° stands for infinitary rewriting below the root, and is its marked version. 
The symbol stands for both and Correspondingly, the rule in the middle is 

an abbreviation for two rules. The axiom s —r°° s serves to ‘restore’ reflexivity, that is, it 
models the identity steps in S' in (|^. Intuitively, s t can be thought of as an infinitary 
rewrite sequence below the root, shorter than the sequence we are defining. 

We have an infinitary strongly convergent rewrite sequence from s to t if and only if 
s —t can be derived by the rules (|^ in a (not necessarily well-founded) proof tree 
without infinite nesting of that is, proof trees in which all paths (ascending through 
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the proof tree) contain only finitely many occurrences of The depth requirement in 

the definition of strong convergence arises naturally in the rules Q, in particular the middle 
rule pushes the activity to the arguments. 

The fact that the rules ([^ capture the infinitary rewriting relation is a consequence 
of a result due to m which states that every strongly convergent rewrite sequence contains 
only a finite number of steps at any depth d G N, in particular only a finite number of root 
steps —>■£. Hence every strongly convergent reduction is of the form o —as 

in the premise of the first rule, where the steps are reductions of shorter length. 

We conclude with an example of a TRS that allows for a rewrite sequence of length 
beyond w. 

► Example 1.2. We consider the term rewriting system with the following rules: 

f(a;,a;) —>■ D a —C(a) b —> C(b). 

We then have a C“, that is, an infinite reduction from a to in the limit: 

a ^ C(a) ^ C(C(a)) ^ C(C(C(a))) ^-. 

Using the proof rules Q, we can derive a C“ as shown in Figure]^ 

The proof tree in Figure]^ can be described as fol¬ 
lows: We have an infinitary rewrite sequence from a 
to C“ since we have a root step from a to C(a), and 
an infinitary reduction below the root from C(a) to C“. 

The latter reduction C(a) C“ is in turn witnessed 
by the infinitary rewrite sequence a —C“ on the dir¬ 
ect subterms. 

We also have the following reduction, now of length w -I- 1: 

f(a, b) ^ f(C(a), b) ^ f(C(a), C(b)) ->-f(C‘^, C“) ^ D . 

That is, after an infinite rewrite sequence of length ui, we reach the limit term f(C‘^,C“), 
and we then continue with a rewrite step from f(C‘^, C“) to D. 

Figure shows how this rewrite 
sequence f(a,b) —D can be de¬ 
rived in our setup. We note that the 
rewrite sequence f(a,b) —D can¬ 
not be ‘compressed’ to length oj. So 
there is no reduction f(a, b) D. 


Related Work 

While a coinductive treatment of infinitary rewriting is not new 13113110], the previous 
approaches only capture rewrite sequences of length at most uj. The coinductive framework 
that we present here captures all strongly convergent rewrite sequences of arbitrary ordinal 
length. 

From the topological perspective, various notions of infinitary rewriting and infinitary 
equational reasoning have been studied in m- The closure operator Se from m is closely 
related to our notion of infinitary equational reasoning =. The operator Se defined by 
Se{R) = {S o E)*{R) where E{R) is the equivalence closure of R, and S{R) is the strongly 
convergent rewrite relation obtained from (single steps) R. Although defined in very different 
ways, the relations Se{-^) and = typically coincide. In Sectionj^we show that Se{^) C = 
for every rewrite system and we give an example for which the inclusion is strict. 


like Figurelike Figure]^ 

~a^°° ‘ b C‘^ ' 

f(a,b) f(C"’,C‘^) f(C‘^, C"’) D 

f(a,b) D 
M Figure 3 A reduction f(a, b) —D. 



■ Figure 2 A reduction a —C“. 
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Martijn Vermaat has formalized infinitary rewriting using metric convergence (in place 
of strong convergence) in the Coq proof assistant [33], and proved that weakly orthogonal 
infinitary rewriting does not have the property UN of unique normal forms, see |18j . While 
his formalization could be extended to strong convergence, it remains to be investigated to 
what extent it can be used for the further development of the theory of infinitary rewriting. 

Ketema and Simonsen introduce the notion of ‘computable infinite reductions ’ m, 
where terms as well as reductions are computable, and provide a Haskell implementation of 
the Compression Lemma for this notion of reduction. 

Outline 

In Section we introduce infinitary rewriting in the usual way based on ordinals, and with 
convergence at every limit ordinal. Section is a short explanation of (co)induction and 
fixed-point rules. The two new definitions of infinitary rewriting —based on mixing 
induction and coinduction, as well as their equivalence, are spelled out in Section]^ Then, 
in Section [^ we prove the equivalence of these new definitions of infinitary rewriting with 
the standard definition. In Section we present the above introduced relations = and of 
infinitary equational reasoning and bi-infinite rewriting. In Sectioii jjj we compare the three 
relations =, ^ and —As an application, we show in Section^ that our framework is 
suitable for formalizations in theorem provers. We conclude in Section [^ 

I 2 I Preliminaries on Term Rewriting 

We give a brief introduction to infinitary rewriting. For further reading on infinitary rewrit¬ 
ing we refer to [331 |33J |3J [T3] , for an introduction to finitary rewriting to [35] |33J |TJ . 

A signature S is a set of symbols / each having a fixed arity ar{f) G N. Let X be an 
infinite set of variables such that A n S = 0. The set Ter°°{"E, X) of (finite and) infinite 
terms over S and X is coinductively defined by the following grammar: 

T::=“x|/(r^_^)(xGA, /GS). 

ar{f) times 

This means that Ter°°{E,X) is defined as the largest set T such that for all t G T, either 
t G X or t = /(ti, • • • j tn) for some f G E with ar(/) = n and U, <2) • ■ • > fn G T. So the 

grammar rules may be applied an infinite number of times, and equality on the terms is 
bisimilarity. See further Section]^ for a brief introduction to coinduction. 

We write Id for the identity relation on terms. Id := {(s, s) | s G Ter°°{E, X)}. 

► Remark. Alternatively, the set Ter°°{E, X) arises from the set of finite terms, Ter{E, A), 
by metric completion, using the well-known distance function d defined by d(t, s) = 2“" if 
the n-th level of the terms t,s G Ter{E, A) (viewed as labeled trees) is the first level where 
a difference appears, in case t and s are not identical; furthermore, d(t, t) = 0. It is stand¬ 
ard that this construction yields {Ter{E, X),d) as a metric space. Now infinite terms are 
obtained by taking the completion of this metric space, and they are represented by infinite 
trees. We will refer to the complete metric space arising in this way as (T'er°°(S, A),d), 
where Ter°°{E, X) is the set of finite and infinite terms over E. 

Let t G Ter°° (E, X) be a finite or infinite term. The set of positions Vos{f) C N* oft 
is defined by: e G Vos{t), and ip G Vos{f) whenever t = /(ti,... ,tn) with 1 < z < n and 
p G Vos{ti). For p G Vos{t), the subterm t\p of t at position p is defined by t\g = t and 
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f{ti,... ,tn)\ip = ti\p. The set of variables Var{t) C T of t is Var{t) = {a: G T” | G 
'Pos{t).t\p = x}. 

A substitution cr is a map tr : A —> Ter°“(S, A); its domain is extended to Ter°°(fE, X) 
by corecursion: a(f{ti ,..., t„)) = f{a{ti),..., cr(t„)). For a term t and a substitution cr, 
we write ter for cr(t). We write a: i—)■ s for the substitution defined by cr(a;) = s and cr{y) = y 
for all y ^ X. Let Q be a fresh variable. A context C is a term Ter°°{E, A U {Q}) containing 
precisely one occurrence of Q. For contexts C and terms s we write (^[s] for C(Q i—> s). 

A rewrite rule £ —)■ r over S and A is a pair (£, r) of terms r G Ter°°{E, A) such that 
the left-hand side £ is not a variable {£ ^ A), and all variables in the right-hand side r occur 
in i, Var{r) C Vor(f). Note that we require neither the left-hand side nor the right-hand 
side of a rule to be finite. 

A term rewriting system (TRS) TZ over S and A is a set of rewrite rules over S and 
A. A TRS induces a rewrite relation on the set of terms as follows. For p G N* we define 
~^n,p ^ Ter°°(E, X) x Ter'^(S, A), a rewrite step at position p, by C[£a] -^n,p C[ra] if C 
is a context with C\p = Q, £ —>■ r G TZ, and a : X —>■ Ter°°{E,X). We write —>-£ for root 
steps, —>-£ = { {£cr,ra) \ £ ^ r G TZ, cr a substitution}. We write s -Gn t if s -Gn,p t for 
some p G N*. A normal form is a term without a redex occurrence, that is, a term that is 
not of the form C[£a] for some context C, rule £ ^ r G TZ and substitution cr. 

A natural consequence of this construction is the notion of weak convergence: we say 
that <0 ^1 ^2 ■ is an infinite reduction sequence with limit t, if t is the limit of the 

sequence tQ,ti,t 2 ,... in the usual sense of metric convergence. We use strong convergence, 
which in addition to weak convergence, requires that the depth of the redexes contracted in 
the successive steps tends to infinity when approaching a limit ordinal from below. So this 
rules out the possibility that the action of redex contraction stays confined at the top, or 
stagnates at some finite level of depth. 

► Definition 2.1. A transfinite rewrite sequence (of ordinal length a) is a sequence of 
rewrite steps {tp -Gn^p^ t/ 3 -i-i)/ 3 <a such that for every limit ordinal A < a we have that if (3 
approaches A from below, then 


(i) the distance d(t/ 3 ,tA) tends to 0 and, moreover, 

(ii) the depth of the rewrite action, i.e., the length of the position pp, tends to infinity. 


The sequence is called strongly convergent if a is a successor ordinal, or there exists a term 
ta such that the conditions (i) and |(ii)| are fulfilled for every limit ordinal A < a; we then 
write to The subscript ord is used in order to distinguish —from the equivalent 

relation -G°° as defined in Definition |4.41 We sometimes write to 


as defined in Definition 4.4 


ord 


ta to explicitly 

indicate the length a of the sequence. The sequence is called divergent if it is not strongly 
convergent. 


There are several reasons why strong convergence is beneficial; the foremost being that in 
this way we can define the notion of descendant (also residual) over limit ordinals. Also the 
well-known Parallel Moves Lemma and the Compression Lemma fail for weak convergence, 
see m and m respectively. 


(Co)induction and Fixed Points 

We briefly introduce the relevant concepts from (co)algebra and (co)induction that will be 
used later throughout this paper. For a more thorough introduction, we refer to |12]- There 
will be two main points where coinduction will play a role, in the definition of terms and in 
the definition of term rewriting. 
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Terms are usually defined with respect to a type constructor F. For instance, consider 
the type of lists with elements in a given set A, given in a functional programming style: 


type List a = Nil I Cons a (List a) 


The above grammar corresponds to the type constructor F{X) = 1 + A x X where the 1 is 
used as a placeholder for the empty list Nil and the second component represents the Cons 
constructor. Such a grammar can be interpreted in two ways: The inductive interpretation 
yields as terms the set of finite lists, and corresponds to the least fixed point of F. The 
coinductive interpretation yields as terms the set of all finite or infinite lists, and corres¬ 
ponds to the greatest fixed point of F. More generally, the inductive interpretation of a type 
constructor yields finite terms (with well-founded syntax trees), and dually, the coinductive 
interpretation yields possibly infinite terms. For readers familiar with the categorical defin¬ 
itions of algebras and coalgebras, these two interpretations amount to defining finite terms 
as the initial F-algebra, and possibly infinite terms as the final F-coalgebra. 

Formally, term rewriting is a relation on a set T of terms, and hence an element of the 
complete lattice L := V{T x T), the powerset of T x T. Relations on terms can thus be 
defined using least and greatest fixed points of monotone operators on L. In this setting, 
an inductively defined relation is a least fixed point pX. F{X) of a monotone F : L ^ L. 
Dually, a coinductively defined relation is a greatest fixed point vX.F{X) of a monotone 
F : L ^ L. Coinduction, and similarly induction, can be formulated as proof rules: 


X < F{X) 
X < vY. F(V) 


(ly-rule) 


F(X) < X 
pY. F{Y) < X 


(y:i-rule) 


( 8 ) 


These rules express the fact that vY. F{Y) is the greatest post-fixed point of F, and pY. F{Y) 
is the least pre-fixed point of F. 


I 4 I New Definitions of Infinitary Term Rewriting 

We present two new definitions of infinitary rewriting s t, based on mixing induction 
and coinduction, and prove their equivalence. In Section we show they are equivalent to 
the standard definition based on ordinals. We summarize the definitions: 

A. Derivation Rules. First, we define s —t via a syntactic restriction on the proof trees 
that arise from the coinductive rules Q. The restriction excludes all proof trees that 
contain ascending paths with an infinite number of marked symbols. 

B. Mixed Induction and Coinduction. Second, we define s t based on mutually mixing 
induction and coinduction, that is, least fixed points p and greatest fixed points v. 

In contrast to previous coinductive definitions [HIISIIIO], the setup proposed here captures 
all strongly convergent rewrite sequences (of arbitrary ordinal length). 

Throughout this section, we fix a signature E and a term rewriting system TZ over S. 
We also abbreviate T := Ter°° {Y, X). 

► Notation 4.1. Instead of introducing separate derivation rules for transitivity, we write 

a reduction of the form sq Si • • • -w as a sequence of single steps: 

So Si Si S2 • • • S„_i Sn 

conclusion 

This allows us to write the subproof immediately above a single step. 

► Definition 4.2. For a relation R C T x T we define its lifting R by 

R ■= { (/(si,.. ■ ,s„), /(ti,... ,t„)) I / e S, ar{f) =n,si Rti,...,Sn Rtn} U Id. 
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4.1 Derivation Rules 


► Definition 4.3. We define the relation C T x T as follows. We have s t if there 
exists a (finite or infinite) proof tree 5 deriving s t using the following five rules: 


u 4 °°)* o 


split 


Si 






lift 


s s 


such that 6 does not contain an infinite nesting of that is, such that there exists no 
path ascending through the proof tree that meets an infinite number of symbols The 

symbol stands for or so the second rule is an abbreviation for two rules; 

similarly for the third rule. 


We give some intuition for the rules in Definition 4.3 

< OO 


The relations 


and 


are infinitary reductions below the root. We use for constructing parts of the prefix 
(between root steps), and for constructing a suffix of the reduction that we are defining. 
When thinking of ordinal indexed rewrite sequences tr, a suffix of a can have length equal 
to a, while the length of every prefix of a must be strictly smaller than the length of cr. The 
five rules (split, and the two versions of lift and id) can be interpreted as follows: 


(i) The split-rule: the term s rewrites infinitarily to t, s —t, if s rewrites to t using a 
finite sequence of (a) root steps, and (b) infinitary reductions —r°° below the root (where 
infinitary reductions preceding root steps must be shorter than the derived reduction). 

(ii) The lift-rules: the term s rewrites infinitarily to t below the root, s t, if the terms 
are of the shape s = /(si, S2, ■ ■ ■, Sn) and t = /(fi, f2, ■ ■ •, tn) and there exist reductions 
on the arguments: Si —fi, ..., s„ — tn- 

(iii) The id-rules allow for the rewrite relations to be reflexive, and this in turn yields 
refiexivity of —For variable-free terms, refiexivity can already be derived using the 
other rules. For terms with variables, this rule is needed (unless we treat variables as 
constant symbols). 

For an example of a proof tree, we refer to Example |1.2|in the introduction. 


4.2 Mixed Induction and Coinduction 


The next definition is based on mixing induction and coinduction. The inductive part is 
used to model the restriction to finite nesting of in the proofs in Definition 4.3 The 
induction corresponds to a least fixed point /r, while a coinductive rule to a greatest fixed 
point V. 


► Definition 4.4. We define the relation 


C T X T by 


We argue why is well-defined. Let L := 'P{T x T) be the set of all relations on 
terms. Define functions G : L x L ^ L and F : L —>■ L by 


G{R, S) := UR)*oS and F{R) := lyS. G{R, S) = vS. (^^ U i?)* o F . ( 9 ) 

Then we have = fj-R. F(R) = fj-R. vS. G{R, S) = /ii?. vS. (—>-£ U R)* o S. It 

can easily be verified that F and G are monotone (in all their arguments). Recall that a 
function FI over sets is monotone if X CY implies ii(. .. ,X,...) C H{. .. ,Y,...). Hence F 
and G have unique least and greatest fixed points. 
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4.3 Equivalence 


We show equivalence of Definitions 4^ and |4.4| Intuitively, the /ii? in the fixed point 
definition corresponds to the nesting restriction in the definition using derivation rules. If 
one thinks of Definition 4.4 as /ii?. F{R) with F{R) = vS. G{R, S) (see equation (|^), then 
i^"+i( 0 ) are all infinite rewrite sequences that can be derived using proof trees where the 


nesting depth of the marked symbol is at most n. 


To avoid confusion we write 


der 


for the relation 


defined in Definition |4.31 and 


Dp 


4.4 


We show 


'der 


fp' 


Definition 


4.3 


for the relation defined in Definition 
requires that the nesting structure of in proof trees is well-founded. As a consequence, 
we can associate to every proof tree a (countable) ordinal that allows to embed the nesting 
structure in an order-preserving way. We use Wi to denote the first uncountable ordinal, and 
we view ordinals as the set of all smaller ordinals (then the elements of Wi are all countable 
ordinals). 


► Definition 4.5. Let (5 be a proof tree as in Definition |4.3| and let a be an ordinal. An 

a-labeling of S is a. labeling of all symbols in S with elements from ol such that each 

label is strictly greater than all labels occurring in the subtrees (all labels above). 

► Lemma 4.6. Every proof tree as in Definition |/(.g| has an a-labeling for some a G uji. 

Proof. Let <5 be a proof tree and let L{S) be the set positions of symbols ^7er in t- For 
positions p,q G L{S) we write p < g if p is a strict prefix of q. Then we have that > is 
well-founded, that is, there is no infinite sequence po < Pi < P 2 < • ■ ■ with pi G L(5) {i > 0) 
as a consequence of the nesting restriction on TFe the extension of this well-founded 

order on L(t) to a total, well-founded order is isomorphic to an ordinal a, and a < loi since 
L{t) is countable. ◄ 


► Definition 4.7. Let 5 be a proof tree as in Definition |4.3| We define the nesting depth of 
5 as the least ordinal a G uii such that 8 admits an a-labeling. For every a < Wi, we define 
a relation —C —as follows: s ^ whenever s —t can be derived using a 

proof with nesting depth < a. Likewise we define relations and der- 


As a direct consequence of Lemma|4.6|we have: 


► Corollary 4.8. We have ^^^^der = ^Ter- 


► Theorem 4.9. Definitions 4-3 and 4-4 define the same relation, 


cOO 

' der 


vOO 


Proof. We begin with —C —Recall that A(—>-^^) is the greatest fixed point of 
)> see Also, we have , and hence 


Fi^Ter) = U )* O F(^-J = (^g U 4^g,)* O F(^“J (10) 

F{^7er) = Id U { im, f(7)) I S F{^7J t} (11) 


where s, t abbreviate si,..., s„ and D,..., respectively, and we write s i? t if we have 
Si R ti,... ,Sn R tn- Employing the p-rule from it suffices to show that E(—C 
—>-7er- Assume (s,t) G A(—Then (s,t) G (—>■£ U -^Ter)* °F{->- 7 .^) ■ Then there exists s' 
such that s (—>■£ U F^7er. 


r -s' and s' F{-^7er) distinguish cases according to ([ll|): 


U 


^ der. 


)* t t 


id 

split 


Ti 


T„ 


U 


^ der) 


lift 
split 
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Here, for i G n}, Ti is the proof tree for s. 

corecursively applying the same procedure. 

Next we show that C —By Corollary 4.8 it suffices to show 
prove by well-founded induction on a < that 


ti obtained from Si ti by 


, oo 

^a,der — 


^ We 
Since —is a fixed point 


of F, we obtain —= F"(—J-^), and since F(—is a greatest fixed point, using the ^-rule 
from (|^, it suffices to show that (*) ^ Thus assume that s 

and let <5 be a proof tree of nesting depth < a deriving s The only possibility to 

derive s t is an application of the split-rule with the premise s (—>-£ U ° ~^Ter 


Since s have s (—>-£ U 


< OO 


,der. 


< 


oo 


—r’^der Tet T be one of the steps 

displayed in the premise. Let u be the source of r and v the target, so r : it ^^der 
The step r is derived either via the id-rule or the lift-rule. The case of the id-rule is not 
interesting since we then can drop r from the premise. Thus let the step r be derived using 
the lift-rule. Then the terms it, v are of form u = /(iti,..., Un) and v = f{vi ,..., !>„) and 
for every 1 < i < n we have Ui -^^der some fi < a. Thus by induction hypothesis 


we obtain it. 

s ( 


U 


_ ~'fp 


for every 1 < i < n, and consequently u 


'a,der and hence s G(^^, 


7p 


V. We then have 


' OL^der 


,) t. This concludes the proof. 


5 


Equivalence with the Standard Definition 


In this section we prove the equivalence of the coinductively defined infinitary rewrite rela¬ 
tions from Definitions |4.3| (and |4.4[ ) with the standard definition based on ordinal length 
rewrite sequences with metric and strong convergence at every limit ordinal (Definition |2.1[ ). 
The crucial observation is the following theorem from 

► Theorem 5.1 (Theorem 2 of m)- A transfinite reduction is divergent if and only if for 
some n gN there are infinitely many steps at depth n. 

We are now ready to prove the equivalence of both notions: 


► Theorem 5.2. We have 


Proof. We write to denote a reduction —without root steps, and we write — 

and -^ard to indicate the ordinal length a. 

We begin with the direction —C —We define a function ‘I (and by guarded 

corecursion [S], mapping rewrite sequences s —t (and s t) to infinite proof trees 

derived using the rules from Definition |4.3| This means that every recursive call produces a 
constructor, contributing to the construction of the infinite tree. Note that the arguments 
of T (and are not required to be structurally decreasing. 

We do case distinction on the ordinal a. If a = 0, then t = s and we define 


T'(s 


^ ord 


s) 




ord 


s) = 


split 


^(<)( 




id 


If a > 0, then, by Theorem 5.1 the rewrite sequence s ^ contains only a finite 

number of root steps. As a consequence, it is of the form: 


S _ So Si • • • S„_i Sji — f 

where for every i G {0,..., n — 1}, s^ is either a root step Si Si+i, or an infinite 

reduction below the root Si —r~ffd ®i+i where Si —r'fffd if i < n — 1. In the latter case. 
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the length of Si —rord Si+i is smaller than a because every strict prefix must be shorter than 
the sequence itself. We define 

To Ti ■ ■ ■ Tn-l 

t 

where, for 0 < j < n, 

{ Si —>-£ Si+i if Si Si+i is a root step, 

T<(si ^ord ■Si+i) if i < n - 1 and Si ^^^d some (3 < a, 

-^ord Si+i) if * = n - 1 and Si ^g^d s*+i ^or some j3 < a. 

For rewrite sequences s t with a > 0 we have that s = /(si,...,s„) and t = 

/(ti,..., tn) for some / G S of arity n and terms si,..., s„, ti,..., G Ter°°{Yi, X), and 

there is a rewrite sequence Si —ti for every i with 1 < i < n. We define the two rules: 


~^ord ^i) 


2 :(s„ 


)>-“ f ) 

' ord 


^(<)(^ 


^ ord 


t) = 


S ‘ 4 ’“ t 


lift 


The obtained proof tree T(s -^g^d derives s t. To see that the requirement that 
there is no ascending path through this tree containing an infinite number of symbols 
is fulfilled, we note the following. The symbol is produced by T<(s —r^^d which is 
invoked in T(s — t) for a /3 that is strictly smaller than a. By well-foundedness of < on 
ordinals, no such path exists. 

We now show —C —We prove by well-founded induction on a < wi that 
—>■“ C —This suffices since —= —>■“ . Let a < wi and assume that s — t. Let 5 be 
a proof tree of nesting depth < a witnessing s —>■“ t. The only possibility to derive s t 
is an application of the split-rule with the premise s (—>■£ U o t. Since s —>■“ t, 

we have s (—>-£ U 4“)* o t. By induction hypothesis we have s (—>-£ U —>-4^)* ° 
and thus s o t. We have = —>- 2 ^ , and consequently s -^Zd Si i for 
some term si. Repeating this argument on si —t, we get s —si — S 2 — t. 
After n iterations, we obtain 


^ord 


ord 


52 


ord 


S3 


ord 


S4- 




cxD\ —(n —1) 


C)-” 


where (—>■“) "■ denotes the nth iteration of a; >->■ x on —>■“. 

Clearly, the limit of {s„} is t. Furthermore, each of the reductions s„ -^Zd S"+i 
strongly convergent and take place at depth greater than or equal to n. Thus, the infinite 
concatenation of these reductions yields a strongly convergent reduction from s to f (there 
is only a finite number of rewrite steps at every depth n). ◄ 
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6 


Infinitary Equational Reasoning and Bi-Infinite Rewriting 


6.1 Infinitary Equational Reasoning 

► Definition 6.1. Let 7?, be a TRS over S, and let T = Ter°°X). We define infinitary 
equational reasoning as the relation =“ C T x T by the mutually coinductive rules: 


(■(—£ U —>-£ U t 


^ 4. 

s = t 


OO 4 ^ 

Si — • • • Sfi — iji 

/(si, S2, ■ • • , S„) w /(tl, <2, • ■ • , tn) 


where \-r C T x T stands for infinitary equational reasoning below the root. 

Note that, in comparison with the rules ([T]) for = from the introduction, we now have 
used U —>-£ instead of =ti- It is not difficult to see that this gives rise to the same 
relation. The reason is that we can ‘push’ non-root rewriting steps = 7 ?, into the arguments 


► Example 6.2. Let 7?. be a TRS consisting of the following rules: 

a-^f(a) b^f(b) C(b) ^ C(C(a)). 

Then we have a = b as derived in Figure 0 (top), and C(a) = as in Figure i (bottom). 


f(a) f(a) P 


00 r , 

a = f‘" 


f(b) f(b) 


= b 


f(a) 


f(a)^p’’'." "."V^f(b) 


f(b) b 


a = b 


(as above) 

00 , 

a = b 


C(a) = e 


C(a) “ C(b) C(b) ^E C(C(a)) C(C(a)) “ e 


“Try 


C(a) = C"’ 

Figure 4 An example of infinitary equational reasoning, deriving C(a) = C“ in the TRS TZ of 


Example 


6.2 


Recall Notation 


4.1 


Definition 6.1 of = can also be defined using a greatest fixed point as follows: 
= := iri?. (^E U ^E U 7?)* , 


where R was defined in Definition 


4.2 


The equivalence of these definitions can be established 
in a similar way as in Theorem 4.9 It is easy to verify that the function R (•<—e U — 

U i?)* is monotone, and consequently the greatest fixed point exists. 

We note that, in the presence of collapsing rules (i.e., rules ^ r where r S X), 
everything becomes equivalent: s = t for all terms s, t. For example, having a rule f(a:) —>■ x 
we obtain that s = f(s) = f^(s) = • • • = P for every term s. This can be overcome by 
forbidding certain infinite terms and certain infinite limits. 
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6.2 Bi-Infinite Rewriting 

Another notion that arises naturally in our setup is that of bi-infinite rewriting, allowing 
rewrite sequences to extend infinitely forwards and backwards. We emphasize that each of 
the steps —>-£ in such sequences is a forward step. 

► Definition 6.3. Let 7?. be a term rewriting system over S, and let T = Ter°°(S, A). We 
define the bi-infinite rewrite relation ^ C T x T by the following coinductive rules 

^ (~tg U —r) t _ Si —t tl • • • Sn —» tn _ 

S “ t /(Sl, S2, . . . , S„) “ f{tl,t2, ■■■fin) 

where ^ G T x T stands for bi-infinite rewriting below the root. 

If we replace = and —by and ^ and by then Examples 
illustrations of this rewrite relation. 

Again, like =, the relation “ can also be defined using a greatest fixed point: 

“ := ■ 

Monotonicity of i? i—> (—)-£ U R)* is easily verified, so that the greatest fixed point exists. 
Also, the equivalence of Definition |6.3| with this z/-definition can be established similarly. 


1.1 


and 


1.2 


are 


pT"! Relating the Notions 

► Lemma 7.1. Eaeh of the relations ^ and = is reflexive and transitive. The relation 
= is also symmetric. 

Proof. Follows immediately from the fact that the relations are defined using the reflexive- 
transitive closure in each of their first rules. ◄ 


► Theorem 7.2. For every TRS TZ we have the following inclusions: 


' C C 

c c 


c 


Moreover, for each of these inclusions there exists a TRS for which the inclusion is strict. 

Proof. The inclusions — C C = have already been established in the introduction. 
The inclusion C (°°-(— U —is well-known (and obvious). Also ^ C U ^)* is 
immediate since ^ is not symmetric. 


1.1 


The inclusion U —C (•(—U—>■)* is immediate since —C —>■. Example 

witnesses strictness of this inclusion. The reason is that, for this example, = —>■* as the 
system does not admit any forward limits. Hence (°°'(— U —>.“)* is just finite conversion on 
potentially infinite terms. Thus C‘^ ^ a, but not (°°-(— U —>.°°)* a. 

The inclusion U ^)* C = follows from the fact that = includes ^ and is symmetric 


and transitive. Example 6.2 witnesses strictness: C(a) = can only be derived by a rewrite 
sequence of the form: 


C(a) “ C(P) “ C(b) ^ C(C(a)) “ C(C(P)) “ C(C(b)) ^ C(C(C(a))) 


and hence we need to change rewriting directions infinitely often whereas (•<— U —>■)* allows 
to change the direction only a finite number of times. ◄ 
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► Lemma 7.3. For relations S C Ter°°{T,, X) x Ter°°{Ti,X) we define 
T{S) := nR.{S-^USURy . 


oo oo oo 

M/e have T (S) = T (T (S')) for every S C Ter°°{T.,X) x Ter^{T.,X). 

Proof. For every relation S we have S C (S“^USUi?)* and hence S C T (S) by (|^. Hence 

OO OO OO OO OO OO 

it follows that T (S) Q T {T (S)). For T [T (S)) C T (S) we note that 


OO OO OO OO OO OO 

T (T (S)) = ( T (S)-^ U T (S) U r (T (S)) )* 

OO OO OO 

= ( T (S) U T (T (S)) )* 

= ( ( S"^ U S U T (S) )* U T (T (S)) )* 
= ( S"^ U S U T (S) U T (T (S)) )* 

- OO oo 

= ( S"^ u su T (r (S)) )* 


by definition 

OO 

by symmetry of T (S) 
by definition 


OO OO OO 

since T (S) C T {T (S)) 


QQ QQ _ QQ QQ QQ 

Thus T (T (S)) is a fixed point of i? (S“^ U S U R)*, and hence T {T (S)) C T (S). ◄ 


It follows immediately that = is closed under T (•)• 

► Corollary 7.4. We have = = T (=) for every TRS TZ. 

^ OO OO OO OO ^ 

Proof. We have = = T (—tg) = T {T (—te)) = T (=)• ◄ 


The work |24) introduces various notions of infinitary rewriting. We comment on the 
notions that are closest to the relations ^ and = introduced in our paper. First, we note 
that it is not difficult to see that ^ C —»•( where —»■( is the topological graph closure of —>■. 
The paper |24j also introduces a notion of infinitary equational reasoning with a strongly 
convergent flavour, namely: 

Se{R) = (SoEYiR) 

where E{R) is the equivalence closure of R, and S{R) is the strongly convergent rewrite 
relation obtained from (single steps) R. The following lemma relates this notion with our 
notion of infinitary equational reasoning =. 

► Lemma 7.5. We have Se{^) C = for every TRS TZ. Moreover, there exists TRSs TZ 
for which the inclusion is strict. 

Proof. The inclusion is immediate from 

(i) ^ c =, 

(ii) E{=) = =, and 
(hi) ^(=) C T (=) = =. 


The following example shows that the inclusion can be strict. 


•4 
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► Example 7.6. Consider the TRS TZ consisting of the rules 

g{h{e)) g{g{a^+l{e))) 

ao(e) -t /o(ao(e)) 

ai+i(e) —t ai+i{ai{e)) 

<ii+iibi{e)) —>■ /i+i(ai+i(e)) 

for every i G N. We will argue that 

g{ao{e)) = ^ , (12) 

but this equality does not hold in Se{^)- 

We have ao(e) = &o(£) as a consequence of ao{e) = /q = 6o(£)- Moreover, by induction 
on i G N we conclude that ai+i(e) = &i+i(£) since 

a.+i(£) = a.+i(a.(£)) ^ a^+Me)) ^ /.+i(a.+i(£)) = • • • = /r+i 

and likewise 


bois) —>■ foiboi^)) 
bi+i{s) —> &i+i(6i(e)) 

bi+i{ai{£)) —> /i+i(6i+i(£)) 


6,+i(£) = 5.+i(6.(e)) ^ 6.+i(a.(£)) ^ /.+i(6.+i(£)) = • • • ^ /r+i . 


Then we obtain equation ( 12 ) since 

g{ao{e)) = g{bo{s)) ^ g{g{a^{s))) = g{gMe))) = g{g{g{a2{e)))) ^ ^ 5^ 


We give a rough sketch of the proof that equation is not valid in (^) = {SoEY{^). 
We use Rn to denote the relation {S o >•). Note that 


(a) The relation Ri contains only forward limits such as ao(£) i?i and 60(e) Ri Jq, but 
no backwards limits like Jq Ri 60(e) and hence not ao(e) Ri 60(e). 

(b) The relation i?2 contains forward limits using steps E{Ri) and we have ao(e) E{Ri) 60(e). 
Thus we can derive ai(e) R2 /“ and 61(e) i?2 !\- However, we do not have /“ i?2 61(e). 

(c) The relation i?3 contains forward limits using steps £'(i?2) and we have ai(e) i?(i?2) 61(e). 
We derive a2(e) R3 and 62(e) R3 f^, but not R3 62(e). 

(d) ... 


In general, we obtain for every i,j G N that 


(i) aj{e) Ri /“ if and only if j < i, 

(ii) 6j(e) Ri /“ if and only if j < i, 

(iii) aj{e) E{Ri) bj{e) if and only if j < i. 


For deriving equation ( 12 1 we need ai(e) = 6i(e) for every i G N, and consequently there 
exists no i G N such that g{ao{£)) Ri g^■ Hence equation ( 12 1 does not hold in Se{^)- 
We note that the rewrite system contains an infinite number of rules and symbols. How¬ 
ever, this is not crucial for illustrating the difference between = and 5 ^;(—>■). We can 
obtain a system with finitely many rules and symbols by modelling ai{x), bi{x) and fi{x) 
by a(s*( 0 ),x), 6 (s*( 0 ),x) and /(s*( 0 ),x). The corresponding finite system is: 


g{b{x,e)) g(g(a(s(x),£))) 

a(0,e) /(0,a(0,e)) 

a(s(x),e) —>■ a(s(x), a(x, e)) 
o(s(x),6(x,e)) -)• f(s(x),a(s(x),£)) 


6(0, e) /(0,6(0,e)) 
6(s(x),e) —?> 6(s(x), 6(x,e)) 
b(s(x),a(x,£)) f(s(x),b(s(x),£)) 


Then g(a( 0 ,e)) = 5“ but this equation does not hold in Se(—>-)- 
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A Formalization in Coq 


The standard definition of infinitary rewriting, using ordinal length rewrite sequences and 
strong convergence at limit ordinals, is difficult to formalize. The coinductive framework we 
propose, is easy to formalize and work with in theorem provers. 

In Coq, the coinductive definition of infinitary strongly convergent reductions can be 
defined as follows: 


Inductive ired 
I Ired : 

forall R 
subrel I 
subrel R 
subrel R 


: relation term := 

I : relation term, 
ired -> 

((root_step (+) lift I)* ;; lift R) 
ired. 


-> 


Here term is the set of coinductively defined terms, ; ; is relation composition, (+) is the 
union of relations, * the reflexive-transitive closure, lift R is i?, and root_step is the root 
step relation. 

Let us briefly comment on this formalization. Recall that:= fiR. lyS. G{R, S) where 
G{R, S) = (—>-£ U R)* o S. The inductive definition of ired corresponds to the least fixed 
point fiR. Coq has no support for mutual inductive and coinductive definitions. Therefore, 
instead of the explicit coinduction, we use the i^-rule from (|^. For every relation T that 
fulfills T C G{R,T), we have that T C vS.G{R, S). Moreover, we know that i^S. G{R, S) 
is the union of all these relations T. Finally, we introduce an auxiliary relation I to help 
Coq generate a good induction principle. One can think of I as consisting of those pairs for 
which the recursive call to ired is invoked. Replacing lift 1 by lift ired is correct, but 
then the induction principle that Coq generates for ired is useless. 

On the basis of the above definition we proved the Compression Lemma: whenever there 
is an infinite reduction from s to t {s t) then there exists a reduction of length at most 
u! from s to t {s — t). The Compression Lemma holds for left-linear TRSs with finite 
left-hand sides. To characterize rewrite sequences —in Coq, we define: 


Inductive ored : relation (term F X) := 
I Ored : 

forall R : relation (term F X), 
subrel R (mred ;; lift R) -> 
forall St, R s t -> ored s t. 


Here mred are finite rewrite sequences —>*. The definition can be understood as follows. 
We want the relation ored to be the greatest fixed point of H defined by H (R) = —>■* o R. 
So we allow a finite rewrite sequence after which the rewrite activity has to go ‘down’ to 
the arguments. Again, as above for ired, we avoid the use of coinduction and define ored 
inductively as the union of all relations R with R C H{R). 

To the best of our knowledge this is the first formal proof of this well-known lemma. The 
formalization is available at http://dimitrihendriks.com/coq/compression 


9 


Conclusion 


We have proposed a coinductive framework which gives rise to several natural variants of 
infinitary rewriting in a uniform way: 

(a) infinitary equational reasoning = := vy. U —i-g U y)*, 
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(b) bi-infinite rewriting ^ := i/y. (—>£ U y)*, and 

(c) infinitary rewriting:= y,x. lyy. U x)* o y . 

We believe that (a) and (b) are new. As a consequence of the coinduction over the term 
structure, these notions have the strong convergence built-in, and thus can profit from the 
well-developed techniques (such as tracing) in infinitary rewriting. 

We have given a mixed inductive/coinductive definition of infinitary rewriting and es¬ 
tablished a bridge between infinitary rewriting and coalgebra. Both fields are concerned 
with infinite objects and we would like to understand their relation better. In contrast to 
previous coinductive treatments, the framework presented here captures rewrite sequences 
of arbitrary ordinal length, and paves the way for formalizing infinitary rewriting in theorem 
provers (as illustrated by our proof of the Compression Lemma in Coq). 

Concerning proof trees/terms for infinite reductions, let us mention that an alternative 
approach has been developed in parallel by Lombardi, Rios and de Vrijer m- While we focus 
on proof terms for the reduction relation and abstract from the order of steps in parallel 
subterms, they use proof terms for modeling the fine-structure of the infinite reductions 
themselves. Another difference is that our framework allows for non-left-linear systems. We 
believe that both approaches are complementary. Theorems for which the fine-structure of 
rewrite sequences is crucial, must be handled using [MH] . (But note that we can capture 
standard reductions by a restriction on proof trees and prove standardization using proof 
tree transformations, see ED]). If the fine-structure is not important, as for instance for 
proving confluence, then our system is more convenient to work with due to simpler proof 
terms. 

Our work lays the foundation for several directions of future research: 

(i) The coinductive treatment of infinitary A-calculus [ID] has led to elegant, significantly 
simpler proofs lillD] of some central properties of the infinitary A-calculus. The coinduct¬ 
ive framework that we propose enables similar developments for infinitary term rewriting 
with reductions of arbitrary ordinal length. 

(ii) The concepts of bi-infinite rewriting and infinitary equational reasoning are novel. We 
would like to study these concepts, in particular since the theory of infinitary equational 
reasoning is still underdeveloped. For example, it would be interesting to compare the 
Church-Rosser properties 

^ C o and (°°^ o ^~)* C o . 

(iii) The formalization of the proof of the Compression Lemma in Coq is just the first step 
towards the formalization of all major theorems in infinitary rewriting. 

(iv) It is interesting to investigate whether and how the coinductive framework can be ex¬ 
tended to other notions of infinitary rewriting, for example reductions where root-active 
terms are mapped to T in the limit omiiiiD]. 

(v) We believe that the coinductive definitions will ease the development of new techniques 
for automated reasoning about infinitary rewriting. For example, methods for proving 
(local) productivity [Tnj[ID||3^, for (local) infinitary normalization |^[T31[I1], for (local) 
unique normal forms [18] , and for analysis of infinitary reachability and infinitary conflu¬ 
ence. Due to the coinductive definitions, the implementation and formalization of these 
techniques could make use of circular coinduction miin]. 
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